Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: wILP4QGrPVAongjbolwj6+Ff9YD2rB/i12B+CO16obw=
Subject key identifier: 48:34:93:A8:BD:00:4B:DD:BC:63:5A:A9:3E:DB:7D:E4:BB:63:F2:69
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 019A54517C2DECA285C96890DC46004A8505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 1450
Signing time: Wed 05 Nov 2025 14:00:17 +0000
Manifest this update: Wed 05 Nov 2025 14:00:17 +0000
Manifest next update: Thu 06 Nov 2025 14:00:17 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: ulA5RlCyHDt04XKExjW8RALJa7TDgiACpwDL0b17FDY=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:7c:2d:ec:a2:85:c9:68:90:dc:46:00:4a:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Nov 5 14:00:17 2025 GMT
Not After : Nov 6 14:00:17 2025 GMT
Subject: CN=483493a8bd004bddbc635aa93edb7de4bb63f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:c8:5c:83:3c:23:0d:69:44:e4:c9:35:29:
22:a7:53:df:e4:e7:bd:7b:30:ca:5e:17:19:7d:38:
b1:d0:e8:1e:7d:42:39:23:94:b6:61:8e:ae:07:66:
53:5f:7b:58:30:a8:22:5c:64:9f:2c:96:6b:84:aa:
1b:a0:75:49:78:d7:3d:ae:19:7c:00:51:ea:c9:c7:
36:61:6e:15:0c:dd:5b:32:45:98:3e:73:0b:e2:94:
d7:2f:b4:f3:a0:3f:01:8f:c6:92:96:f9:56:66:1a:
e2:0f:b7:71:cf:72:ce:7e:33:9f:3e:2c:ff:6d:3f:
75:21:5b:d2:1c:de:cc:73:60:9f:86:3e:19:55:da:
5a:6a:7b:23:35:9f:6d:ce:c1:c1:f5:f1:d3:73:b8:
f9:d5:80:58:9a:d0:84:48:3a:54:c6:4f:7f:b7:86:
34:24:9f:9f:dc:7d:c4:78:8d:64:cb:83:10:6b:df:
82:51:1d:a4:b1:c8:4e:be:8d:a9:50:b7:b3:91:14:
2e:b5:73:23:cd:4a:28:5f:32:66:73:f5:c3:17:40:
4a:87:c2:b9:46:a9:07:63:12:94:e8:6c:e4:ef:17:
de:da:42:0d:44:aa:14:31:8f:10:96:48:21:47:d2:
ad:8a:60:7c:fe:73:15:bc:a1:16:7f:3d:91:25:88:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:93:A8:BD:00:4B:DD:BC:63:5A:A9:3E:DB:7D:E4:BB:63:F2:69
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:37:bd:27:f0:57:60:94:7b:8d:1e:9f:70:f0:8d:d8:de:
5c:16:db:7a:a9:3d:0d:f7:52:f6:c2:a2:1e:b5:68:bb:60:a5:
4d:45:55:82:31:8b:31:25:40:56:da:27:e3:8f:36:29:11:ce:
49:2e:9f:c0:d8:93:14:69:f0:91:d7:f5:98:0b:ce:33:4e:48:
a8:1e:68:c6:99:3b:45:74:0d:33:bb:75:c4:cc:43:85:c5:c7:
d3:a4:71:e0:21:8e:6b:d6:98:db:6c:2c:f6:cb:87:4f:ae:a1:
c5:32:d2:da:2e:9d:dd:22:eb:7a:d8:0c:8d:6b:e7:4a:81:c7:
f0:19:ce:bf:77:2d:0e:e4:59:f7:38:67:52:d0:dc:54:01:3f:
c9:68:dc:f8:01:b8:1a:2c:82:df:2e:af:9a:f8:90:ec:c6:c6:
1e:cb:9f:90:eb:a9:63:83:e7:62:78:eb:7c:5c:2e:5e:eb:45:
be:7c:4e:49:b7:eb:1c:0f:fc:87:8f:2d:a2:0b:b5:30:d6:e6:
d0:e3:e8:d0:04:99:1b:1b:fe:ee:33:cd:82:f7:96:46:dc:6e:
99:fa:88:03:d0:56:dc:de:42:34:ab:17:b1:85:63:65:ff:44:
da:41:b4:74:d6:da:83:9a:b4:6a:51:12:b8:6d:61:9e:e6:43:
1c:83:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:52 2025 by rpki-client